[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjTQrBtNLHSH7ZuO4osbDI2O6zvYoB6ipO1UdhnyQpuA":3,"g5a-ex:ibm\u002Fwebsphere_datapower_xc10_appliance@*":119,"g5a-family:ibm\u002Fwebsphere_datapower_xc10_appliance":121},{"success":4,"data":5},true,{"product":6,"versions":31,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":96,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":30},"ibm","websphere_datapower_xc10_appliance",7,11,0,"2016-07-02",[14,18,20,22,24,26,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.0.0",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.0.1",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.0.2",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.0.3",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"2.1.0.0",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"2.1.0.1",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"2.1.0.2","Websphere Datapower Xc10 Appliance by Ibm is a technology product with 7 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[32,33,34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},[40,48,54,57,61,68,73,80,86,90],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2013-0600","Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors.","2013-05-09",9.3,"v2","Critical",0.02721,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":53},"CVE-2014-3059","Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network.","2014-10-02",10,0.0241,{"cveId":55,"description":56,"publishedDate":51,"cvssScore":52,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":53},"CVE-2014-3060","Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":52,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":53},"CVE-2013-5403","Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors.","2013-09-27",{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":45,"severity":66,"isKev":17,"epssScore":67},"CVE-2012-5758","The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service (process exit) via unknown vectors.","2012-11-23",7.8,"High",0.0236,{"cveId":69,"description":70,"publishedDate":64,"cvssScore":71,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":72},"CVE-2012-5759","The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.",9,0.02196,{"cveId":74,"description":75,"publishedDate":12,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":17,"epssScore":79},"CVE-2016-2870","Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors.",2.7,"v3.0","Low",0.01712,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":45,"severity":66,"isKev":17,"epssScore":85},"CVE-2013-5428","IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.","2013-10-22",7.1,0.01686,{"cveId":87,"description":88,"publishedDate":83,"cvssScore":52,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":89},"CVE-2013-5446","The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.",0.01679,{"cveId":91,"description":92,"publishedDate":64,"cvssScore":93,"cvssVersion":45,"severity":94,"isKev":17,"epssScore":95},"CVE-2012-5756","The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by (1) sniffing the network to locate a cleartext transmission of this key or (2) leveraging knowledge of this key from another installation.",4.3,"Medium",0.01348,[],{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"Websphere Datapower Xc10 Appliance by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Websphere Datapower Xc10 Appliance by Ibm covering 7 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Websphere Datapower Xc10 Appliance vulnerabilities, Websphere Datapower Xc10 Appliance security, Websphere Datapower Xc10 Appliance CVE, Ibm Websphere Datapower Xc10 Appliance, Websphere Datapower Xc10 Appliance threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","Websphere Datapower Xc10 Appliance","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fwebsphere_datapower_xc10_appliance",{"@type":107,"name":108,"url":109},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","7 versions tracked",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Websphere Datapower Xc10 Appliance Security Vulnerabilities","Security vulnerabilities affecting Websphere Datapower Xc10 Appliance by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-28T21:13:35.405Z","3.0",{"rows":120,"total":11,"capped":17,"failed":11},[],[122],{"product":123,"cves":124},"websphere_datapower_xc10_appliance_firmware",14]